MFA flow, Duo, and querying enrollment status

[James Oulman]

On 1/16/19 4:05 PM, Jim Fox wrote:
<snip>
> We call Duo's API to see if a user has Duo.  It assures that we have 
> up-to-the-minute information.  It's quite simple, something like:
> 
>    var Http = Java.type("com.duosecurity.client.Http");
>    ...
>      var request = new Http("POST", "%{uw.idp.duo.api.apiHost:none}", 
> "/auth/v2/preauth", 10);
>      request.addParam("username", <user's id>);
>      request.signRequest("%{uw.idp.duo.api.integrationKey:none}", 
> "%{uw.idp.duo.api.secretKey:none}");
>      ret = request.executeHttpRequest();
> 
> and then look at the returned json doc.
> 

Thank you for the example, Jim! This got me working.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3980 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20190117/9d215807/attachment.p7s>